Latvia's Road Traffic Safety Directorate (CSDD) suffered a cyber attack over the weekend, with attackers partially accessing CSDD's IT system and retrieving historical payment receipt data for CSDD services. The leaked data included sensitive personal information such as personal identification numbers, registration numbers, first and last names, company names, payment details, payment dates, car license plates, and addresses. The cyber incident prevention institution CERT.LV cooperated with CSDD to stop the attack and enhance IT system security. CSDD IT Department Head Māris Puriņš confirmed that the attack methods have been discovered and blocked, and they are working with CERT.LV to analyze the consequences further. Customer usernames and passwords remain unaffected, so customers are not required to take action. CERT.LV Deputy Head Varis Teivāns stated the attack was targeted and well-prepared, indicating technical competence by the attackers. They warn that stolen data might be used for future targeted fraud and advise vigilance towards communications purportedly from CSDD, recommending verification via the official site e.csdd.lv. The incident has not disrupted in-person or electronic services, and relevant authorities including the State Data Inspectorate have been informed.

Latvia's Road Traffic Safety Directorate (CSDD) suffered a cyber attack over the weekend, with attackers partially accessing CSDD's IT system and retrieving historical payment receipt data for CSDD services. The leaked data included sensitive personal information such as personal identification numbers, registration numbers, first and last names, company names, payment details, payment dates, car license plates, and addresses. The cyber incident prevention institution CERT.LV cooperated with CSDD to stop the attack and enhance IT system security. CSDD IT Department Head Māris Puriņš confirmed that the attack methods have been discovered and blocked, and they are working with CERT.LV to analyze the consequences further. Customer usernames and passwords remain unaffected, so customers are not required to take action. CERT.LV Deputy Head Varis Teivāns stated the attack was targeted and well-prepared, indicating technical competence by the attackers. They warn that stolen data might be used for future targeted fraud and advise vigilance towards communications purportedly from CSDD, recommending verification via the official site e.csdd.lv. The incident has not disrupted in-person or electronic services, and relevant authorities including the State Data Inspectorate have been informed.